Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/876582d6-fa70-3b03-9ce4-1d237ac385b7.roa
File:                     876582d6-fa70-3b03-9ce4-1d237ac385b7.roa (raw, json)
Hash identifier:          pFsNDJ68PxQ0ABdUtOCVuPkuS/e2uq6HXYvhq0Skxy4=
Subject key identifier:   CC:4D:DC:7A:02:A2:F5:47:F6:85:01:6F:12:67:03:45:18:CE:A7:23
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F43285845A2C3439FBEC0EE415F1A0F80
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/876582d6-fa70-3b03-9ce4-1d237ac385b7.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        2607:28c0::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:43:9f:be:c0:ee:41:5f:1a:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=8f190f14-191b-43aa-98eb-648fdf1f9ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:62:3a:9a:e5:21:34:92:31:e7:dd:ab:c1:d4:
                    04:be:54:df:91:3f:ee:78:af:47:a4:67:9b:ab:c7:
                    ff:a6:1c:f8:b0:5b:11:ea:60:35:7c:4f:e3:a3:fc:
                    54:a5:c0:34:5d:a7:d8:a5:f7:3e:94:5e:e3:f9:45:
                    97:3e:13:86:56:32:d0:47:06:03:4e:b7:a5:40:c0:
                    92:1c:8d:8d:ec:f3:d3:a6:d3:85:cd:63:a2:9b:eb:
                    86:5f:3f:c6:45:e7:36:44:7e:1a:3f:8b:3f:f6:ef:
                    a6:fd:82:8f:09:3a:a1:ec:c0:d5:63:4c:0e:fa:ca:
                    c8:fc:38:a7:77:c0:ee:7e:b9:ec:e6:1d:1e:f7:b4:
                    60:29:35:b0:96:82:3e:2c:ca:db:17:1b:f7:3c:96:
                    e1:b2:7a:87:df:0c:f4:bc:9f:ec:0f:d3:31:22:88:
                    f6:9a:4a:62:0d:8c:c3:cb:7e:6d:53:7b:0f:9c:50:
                    33:f2:7f:5c:8b:cc:b6:f8:2a:36:02:c6:d8:27:ab:
                    a6:a8:13:b3:16:c5:69:9c:a8:95:64:c9:a1:be:85:
                    76:f5:e9:5d:27:d0:ba:08:a3:88:5f:8f:bd:d8:1b:
                    f7:3d:50:d8:a6:ae:01:7e:c3:05:3b:48:40:93:9d:
                    08:17:08:81:4f:1c:22:ae:2e:64:92:74:c6:5a:38:
                    ef:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4D:DC:7A:02:A2:F5:47:F6:85:01:6F:12:67:03:45:18:CE:A7:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/876582d6-fa70-3b03-9ce4-1d237ac385b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:28c0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:24:14:fd:bc:5b:e9:f8:fb:4c:6f:87:53:c6:c9:9b:4d:44:
         9d:7e:f9:61:d4:33:8c:8e:4e:e2:39:9a:83:35:93:f2:09:19:
         c0:92:32:5a:de:24:88:5a:4f:a2:2c:bb:c9:bd:04:43:93:e7:
         e5:2d:02:44:7e:c8:ce:d1:ff:db:45:29:f2:13:60:0d:12:d8:
         4d:f3:cc:65:f4:36:4a:13:1e:a8:01:eb:16:ac:97:28:75:54:
         dd:8b:5d:01:79:8a:30:f9:ff:ca:af:6b:6f:18:a2:3b:1a:db:
         de:64:30:8c:29:32:16:77:7c:11:45:36:c8:56:ca:38:8c:82:
         93:b9:18:44:00:a5:47:49:77:f6:af:a4:75:b4:8e:90:af:22:
         2b:60:c5:17:12:97:40:50:d9:eb:16:0b:2c:14:85:3e:4a:ca:
         b2:d4:5d:15:16:5c:39:e9:f4:50:4f:a3:57:f5:a3:da:8d:e9:
         7b:c7:93:fb:40:81:c7:a7:bc:dc:69:f7:df:f0:3a:c6:d9:21:
         12:da:64:c2:55:4c:42:10:a0:79:a5:17:49:0d:cd:2e:7f:51:
         3e:85:ee:f6:04:90:3c:aa:a5:d0:bd:a7:d3:4f:c7:59:26:15:
         72:41:fe:53:27:8b:74:9c:d7:8e:ae:bc:0c:51:df:a4:da:a4:
         f0:1a:f9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:03:00 2024 by rpki-client on console-ams.rpki-client.org